Why “WAF” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
Cloudflare's blog post announcing its updated WAF rules directly implies the existence of in-the-wild exploits: https://blog.cloudflare.com/php-vulnerabilities-wa…
by skrrtww · Oct 21, 2026
Full transaction detection for Cloudflare WAF
by schleck8 · Oct 21, 2026 · 4 points
I'm not from Cloudflare, or particularly a fan of theirs, but they are doing a few things about this, including a new WAF capability: https://blog.cloudflare.com/…
by cr3ative · Oct 21, 2026
Also a WAF isn't magical. I remember the whole 8KiB AWS WAF bypass thing.
by bcvvvy · Oct 21, 2026
There is also plenty of ways to confuse the WAF by simply sending multiple instances of of the relevant header and/or parameter..
by edelbitter · Oct 21, 2026
Slightly disappointed they appear to not have a WAF in front of their Nextcloud shared storage boxes and didn't take the servers offline.
by gib444 · Oct 21, 2026
Interest
Proportion of Hacker News items mentioning "waf" over time.
Mentions
Total number of Hacker News items mentioning "waf" over time.
WAF, or waf, may refer to: Read more on Wikipedia